When I ran the latest Mbam scan it stops at this point: c:windows\system32\NOISE.CHT and then everything locks up and I have to manually force a shut down. I've run it under administrator and regular user. When I ran it under safe mode w/networking the scan completed and found nothing, I rebooted and ran it again and got the NOISE.CHT result again.

I ran a HJT scan and it stopped first and displayed this : HJT-Denied write access to hosts file.
I am running Online Armor++ beta v4.00.050 for Win7 64x. I just installed this new version last night but it seemed to be working ok then. When I first logged on this morning OA++ asked for permission to allow
C:\windows\system32\OEM\NowintoDT.vbs. When I googled it it came up in Dutch and translated to unknown file. I scanned nowintoDT.vbs with mbam and mse and both came up clean.

This is all the info I can recall about the problem here is the hjt log.

I'm using the OA++ for firewall and mse for malware and antivirus. the OA++ antivirus is compatable with mse and offers no conflicts. I have other scanners I use for on demand only. Since getting this new computer I have been struggling to learn the Win7 home premium and the 64x systems so please bear with me. Thanks much

Also, my mail in the hotmail account is now being opened before I open them, does anyone know anything about this type of problem? It has me very worried that my system is severely compromised.

Hello and welcome to the forums! My name is SweetTech, it's a pleasure to meet you.

If you have already received help elsewhere please inform me so that this topic can be closed.

If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:

Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post.

Please make sure to carefully read any instruction that I give you.
Reading too lightly will cause you to miss important steps, which could have destructive effects.

If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!

These instructions have been specifically tailored to your computer and the issues you are experiencing with your computer. It's important to note that these instructions are not suitable for any other computer, even if the issues are fairly similar.

Do not do things I do not ask for, such as running a spyware scan on your computer. The one thing that you should always do, is to make sure sure that your anti-virus definitions are up-to-date!

If I instruct you to download a specific tool in which you already have, please delete the copy that you have and re-download the tool. The reason I ask you to do this is because these tools are updated fairly regularly.

In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!

Please do not use the Attachment feature for any log file. Do a Copy/Paste of the entire contents of the log file and submit it inside your post.

I am going to stick with you until ALL malware is gone from your system. I would appreciate it if you would do the same. From this point, we're in this together
Because of this, you must reply within three days failure to reply will result in the topic being closed!

Please do not PM me directly for help. If you have any questions, post them in this topic. The only time you can and should PM me is when I have not been replying to you for several days (usually around 4 days) and you need an explanation. If that's the case, just send me a message on here.

Lastly, I am no magician. I will try very hard to fix your issues, but no promises can be made. Also be aware that some infections are so severe that you might need to resort to reformatting and reinstalling your operating system. Don't worry, this only happens in severe cases, but it sadly does happen. Be prepared to back up your data. Have means of backing up your data available.

When the scan is complete Notepad will open with the report file loaded in it.

Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please post the contents of the log in your next post.

NEXT:

Please make sure you include the following items in your next post:

1. Any comments or questions you may have that you'd like for me to answer in my next post to you.2. The log that was produced after running the OTS scan.3. An update on how your computer is currently running.

It would be helpful if you could answer each question in the order asked, as well as numbering your answers.

It isn't good news. The OTS scan also stopped in mid scan at this point: C:\Windows\system32\ntdll.dll in the scan and would go no further. I double checked that everything you asked for me to do was done in the order you asked.
At this point I can only say that the computer is not working properly because of the halt in the scan. My questions are self evident, whats wrong? And how did it get to this point? I leave all up to you to decide what you need me to do next. I've never had this problem before, before I sent the original post to you I had disabled OA++ and had to manually enable the windows firewall, that has also never happened before, it has always come on automatically. Sorry for forgetting to mention in in my original post. With OA++ disabled the mbam scan still froze at the same spot, leading me to think that perhaps it was not related to the beta OA++.I re-enabled OA and still had the same problem, it was at that time that I asked for help from your site.

The fix should only take a very short time. When the fix is completed a message box will popup either telling you that it is finished, or that a reboot is needed to complete the fix. If the fix is complete, click the Ok button and Notepad will open with a log of actions taken during the fix. Post that log back here in your next reply.

If a reboot is required, click the "Yes" button to reboot the machine. After the reboot, OTS will finish moving any files that could not be moved during the fix and NotePad will open with the final results at that time. Post that log back here in your next reply.

NEXT:

Malwarebytes' Anti-Malware

I see that you have Malwarebytes' Anti-Malware installed on your computer could you please do a scan using these settings:

Open Malwarebytes' Anti-Malware

Select the Update tab

Click Check for Updates

After the update have been completed, Select the Scanner tab.

Select Perform quick scan, then click on Scan

Leave the default options as it is and click on Start Scan

When done, you will be prompted. Click OK, then click on Show Results

Checked (ticked) all items and click on Remove Selected

After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest

Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

NEXT:

ESET Online ScannerI'd like us to scan your machine with ESET Online Scan

Note:It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.ESET OnlineScan

Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.

A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NEXT:

Please make sure you include the following items in your next post:

1. Any comments or questions you may have that you'd like for me to answer in my next post to you.2. The log that was produced after running the OTS fix.3. The log that was produced after running the updated MalwareBytes' Anti-Malware scan.4. The log that was produced after running the ESET Online Virus Scanner.5. The log that was produced after running the OTS scan.6. The log that was produced after running the Security Check scan.7. An update on how your computer is currently running.

It would be helpful if you could answer each question in the order asked, as well as numbering your answers.

Sorry Sweetech, but once again Mbam started the scan and then stopped and froze completely at the same point C:\Windows\system32\NOISE.cht I had to manually shut down and reboot. Do you want me to run all the instructions under safe mode? Or what else should I do at this time?

Back again, you already know about the mbam not running under normal windows, but the OTS also wouldn't finish running under normal, it stopped at the same point as it did last time. I have gone back to safe mode and run the OTS scan and then the Security check. Here are both of those logs.

As for the rest of the instuctions:
Still haven't discovered why these scans are freezing up in normal mode.
I don't know what other things may be wrong right now until I go back to normal and then use the computer under those circumstances. All the logs are with the exception of the mbam log which you got in the previous post.
When I updated OA++ to newest beta I ran the system check instead of trusting all and then had to go through each checkpoint one at a time. I don't know if I did something like denying service or blocking service to one of the apps. It was after that update that everything started happening. As a last resort should I consider a system restore from before the update? Or should I try and delete the OA++ and now load the newer (came out today) beta and use the trust all selection when setting up? I looked on the beta test site and no one else had anything similar to what I experienced. In other words I'm totally lost and confused.lol

Sweetech I don't know what the heck is going on. After the Kaspersky scan finished I hit report and it generated a screen that gave options to see what was found. It said 2 critical events but would not show what they are. I had options to view all or important or critical events, and then everything froze again when I asked for the critical events to be shown so I could copy and send them to you. I am getting so very frustrated now, i've never had these type of problems before just your every day run of the mill infections. I know you're also frustrated, just don't desert me now. lol

0 user(s) are reading this topic

About What the Tech

Tom (Coyote) Wilson started this site as TomCoyote.org in 2002. Along with SpywareInfo, it was one of the first places to offer online malware removal training in its Classroom. Cluster headaches forced retirement of Tom in 2007, and the site was renamed "What the Tech". Free malware removal help and training has remained a constant.